From 963f1bce58101180d558fd61a3b5912af37364ce Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 25 Aug 2023 02:04:13 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-JSONWEBTOKEN-3180022 - https://snyk.io/vuln/SNYK-JS-JSONWEBTOKEN-3180024 - https://snyk.io/vuln/SNYK-JS-JSONWEBTOKEN-3180026 --- package-lock.json | 578 +++++++++++++++++++++++++++++++++++++++++----- package.json | 6 +- 2 files changed, 517 insertions(+), 67 deletions(-) diff --git a/package-lock.json b/package-lock.json index 1694802c0..4299ab0b2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -541,12 +541,18 @@ } }, "@mojaloop/central-services-error-handling": { - "version": "8.2.1", - "resolved": "https://registry.npmjs.org/@mojaloop/central-services-error-handling/-/central-services-error-handling-8.2.1.tgz", - "integrity": "sha512-/5S+E2gnQX8AAiswVApkv4vbOijVBwwHR71D8BFMcMHumh3zCA0ovigyWiMJJNwQuo79wsRuHdgAmBvH1kxwVg==", + "version": "12.0.4", + "resolved": "https://registry.npmjs.org/@mojaloop/central-services-error-handling/-/central-services-error-handling-12.0.4.tgz", + "integrity": "sha512-Qmg55Yz6yUIT/BlaIRj8w6sNH6t/l4PMUNk546eoMYcBHs1ELL9x2gNYqN/f5wEsTS05iCHYcfO3NBfOV9zYiw==", "requires": { - "@mojaloop/sdk-standard-components": "8.1.0", - "lodash": "4.17.15" + "lodash": "4.17.21" + }, + "dependencies": { + "lodash": { + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", + "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==" + } } }, "@mojaloop/central-services-health": { @@ -660,86 +666,531 @@ } }, "@mojaloop/central-services-shared": { - "version": "8.2.0", - "resolved": "https://registry.npmjs.org/@mojaloop/central-services-shared/-/central-services-shared-8.2.0.tgz", - "integrity": "sha512-o9/sWtLbPnvSXcgxfBQGiJ3vlrYixLiNTvIlyzWX9ou1GHImQa24imV8eUq5KLJZpxRsvdxvwzz8/AxyYLE+ug==", + "version": "8.7.2", + "resolved": "https://registry.npmjs.org/@mojaloop/central-services-shared/-/central-services-shared-8.7.2.tgz", + "integrity": "sha512-iyoFkmxiGL4S4756kZl/tr7xfX2QRqJ9Ibyw/Y8kM43vnXci2DQp02+OZT0poU8SiwRk9DSJNeqfl+yYAJ89cg==", "requires": { "@hapi/catbox": "10.2.3", "@hapi/catbox-memory": "4.1.1", - "@mojaloop/central-services-error-handling": "8.2.1", - "@mojaloop/central-services-logger": "8.1.2", - "@mojaloop/central-services-stream": "8.1.1", - "@mojaloop/event-sdk": "8.1.0", + "@mojaloop/central-services-error-handling": "8.6.2", + "@mojaloop/central-services-logger": "8.6.0", + "@mojaloop/event-sdk": "8.6.2", "axios": "0.19.0", "base64url": "3.0.1", "clone": "2.1.2", "data-urls": "1.1.0", - "glob": "7.1.4", "immutable": "3.8.2", "lodash": "4.17.15", "mustache": "3.1.0", "raw-body": "2.4.1" - } - }, - "@mojaloop/central-services-stream": { - "version": "8.1.1", - "resolved": "https://registry.npmjs.org/@mojaloop/central-services-stream/-/central-services-stream-8.1.1.tgz", - "integrity": "sha512-hmhBgiqHhQP8XEcHTRoVHWWwdHlv7FSz56U99ieoXNmK/V1Aqfdgo2IXokxOPlCyalwgteq+PpYlioyBje7YfA==", - "requires": { - "@mojaloop/central-services-error-handling": "7.5.0", - "@mojaloop/central-services-logger": "8.1.1", - "async": "3.1.0", - "debug": "4.1.1", - "events": "3.0.0", - "node-rdkafka": "2.7.1", - "raw-body": "2.4.1" }, "dependencies": { + "@grpc/proto-loader": { + "version": "0.5.3", + "resolved": "https://registry.npmjs.org/@grpc/proto-loader/-/proto-loader-0.5.3.tgz", + "integrity": "sha512-8qvUtGg77G2ZT2HqdqYoM/OY97gQd/0crSG34xNmZ4ZOsv3aQT/FQV9QfZPazTGna6MIoyUd+u6AxsoZjJ/VMQ==", + "requires": { + "lodash.camelcase": "^4.3.0", + "protobufjs": "^6.8.6" + } + }, "@mojaloop/central-services-error-handling": { - "version": "7.5.0", - "resolved": "https://registry.npmjs.org/@mojaloop/central-services-error-handling/-/central-services-error-handling-7.5.0.tgz", - "integrity": "sha512-Spjllgyx6Y7En5vj7LaRVM5aTU+uuEykawPQaYzj3ZXAQdyHO4Slns8/ggwQ65T2qyMv1PXiqLK5dPBcIRlWYg==", + "version": "8.6.2", + "resolved": "https://registry.npmjs.org/@mojaloop/central-services-error-handling/-/central-services-error-handling-8.6.2.tgz", + "integrity": "sha512-VaIkDLNkICvb9EMvKQKXPuaxhsOhrcnJbAO6DrQKuqYl3hq7FD/4w6bAmOhJ6OEUNVbn3Baukk0hHigKcv2YGw==", "requires": { - "@mojaloop/sdk-standard-components": "7.4.0", + "@mojaloop/sdk-standard-components": "8.6.1", "lodash": "4.17.15" } }, "@mojaloop/central-services-logger": { - "version": "8.1.1", - "resolved": "https://registry.npmjs.org/@mojaloop/central-services-logger/-/central-services-logger-8.1.1.tgz", - "integrity": "sha512-ZAum8Mtl4NvW4IBfQ91bXsAvMwKFu1IDN0Ds81PemEB1Q6bQzAb4o5sIymeb55vwBxgR0msCsDsjMhIxBOjGMQ==", + "version": "8.6.0", + "resolved": "https://registry.npmjs.org/@mojaloop/central-services-logger/-/central-services-logger-8.6.0.tgz", + "integrity": "sha512-TPr6gnYxJfeUjOccDVM10uibPCF4magYhUUbK8xGuPHUfZNAN1uxKGVdkWoDvHvu5ZCZPolie+12ANogAQIH9Q==", "requires": { + "parse-strings-in-object": "1.2.0", + "rc": "1.2.8", "winston": "3.2.1" } }, - "@mojaloop/sdk-standard-components": { - "version": "7.4.0", - "resolved": "https://registry.npmjs.org/@mojaloop/sdk-standard-components/-/sdk-standard-components-7.4.0.tgz", - "integrity": "sha512-5bpw0oFuSon9Zd7qNOhWoLozHLBPGqcu0vFhxMcLecSA5UPjyq5JJf3tAcaAtnJspkTMDW/GieI0uCr9pCEJzA==", + "@mojaloop/event-sdk": { + "version": "8.6.2", + "resolved": "https://registry.npmjs.org/@mojaloop/event-sdk/-/event-sdk-8.6.2.tgz", + "integrity": "sha512-ZeQffxnRNU7+/2PF2viuje2F5cz5EvvDkfajYZJtL9SBPxPqHlXxEV+J3FmHsM8JMDMr5j8rDwz++mVCyYj8Kw==", "requires": { - "base64url": "^3.0.1", - "ilp-packet": "2.2.0", - "jsonwebtoken": "^8.5.1", - "jws": "^3.2.2", - "request": "^2.34", - "request-promise-native": "^1.0.7" + "@grpc/proto-loader": "0.5.3", + "@mojaloop/central-services-logger": "8.6.0", + "@types/protobufjs": "6.0.0", + "brototype": "0.0.6", + "error-callsites": "2.0.2", + "grpc": "1.24.2", + "lodash": "4.17.15", + "moment": "2.24.0", + "parse-strings-in-object": "2.0.0", + "protobufjs": "6.8.8", + "rc": "1.2.8", + "serialize-error": "4.1.0", + "sinon": "7.5.0", + "traceparent": "1.0.0", + "tslib": "1.10.0", + "uuid4": "1.1.4" + }, + "dependencies": { + "parse-strings-in-object": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/parse-strings-in-object/-/parse-strings-in-object-2.0.0.tgz", + "integrity": "sha512-hb50xDyEo8boMtyzB1IdVE4KcTNVbIirk/ZqC8na1irOf/70DyZS30y1FIIAUe9jyHJk9s2QoZ4aBNHR9NXHsg==" + } } }, - "async": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/async/-/async-3.1.0.tgz", - "integrity": "sha512-4vx/aaY6j/j3Lw3fbCHNWP0pPaTCew3F6F3hYyl/tHs/ndmV1q7NW9T5yuJ2XAGwdQrP+6Wu20x06U4APo/iQQ==" - }, - "debug": { - "version": "4.1.1", - "resolved": "https://registry.npmjs.org/debug/-/debug-4.1.1.tgz", - "integrity": "sha512-pYAIzeRo8J6KPEaJ0VWOh5Pzkbw/RetuzehGM7QRRX5he4fPHx2rdKMB256ehJCkX+XRQm16eZLqLNS8RSZXZw==", + "grpc": { + "version": "1.24.2", + "resolved": "https://registry.npmjs.org/grpc/-/grpc-1.24.2.tgz", + "integrity": "sha512-EG3WH6AWMVvAiV15d+lr+K77HJ/KV/3FvMpjKjulXHbTwgDZkhkcWbwhxFAoTdxTkQvy0WFcO3Nog50QBbHZWw==", "requires": { - "ms": "^2.1.1" + "@types/bytebuffer": "^5.0.40", + "lodash.camelcase": "^4.3.0", + "lodash.clone": "^4.5.0", + "nan": "^2.13.2", + "node-pre-gyp": "^0.14.0", + "protobufjs": "^5.0.3" + }, + "dependencies": { + "abbrev": { + "version": "1.1.1", + "bundled": true + }, + "ansi-regex": { + "version": "2.1.1", + "bundled": true + }, + "aproba": { + "version": "1.2.0", + "bundled": true + }, + "are-we-there-yet": { + "version": "1.1.5", + "bundled": true, + "requires": { + "delegates": "^1.0.0", + "readable-stream": "^2.0.6" + } + }, + "balanced-match": { + "version": "1.0.0", + "bundled": true + }, + "brace-expansion": { + "version": "1.1.11", + "bundled": true, + "requires": { + "balanced-match": "^1.0.0", + "concat-map": "0.0.1" + } + }, + "chownr": { + "version": "1.1.3", + "bundled": true + }, + "code-point-at": { + "version": "1.1.0", + "bundled": true + }, + "concat-map": { + "version": "0.0.1", + "bundled": true + }, + "console-control-strings": { + "version": "1.1.0", + "bundled": true + }, + "core-util-is": { + "version": "1.0.2", + "bundled": true + }, + "debug": { + "version": "3.2.6", + "bundled": true, + "requires": { + "ms": "^2.1.1" + } + }, + "deep-extend": { + "version": "0.6.0", + "bundled": true + }, + "delegates": { + "version": "1.0.0", + "bundled": true + }, + "detect-libc": { + "version": "1.0.3", + "bundled": true + }, + "fs-minipass": { + "version": "1.2.7", + "bundled": true, + "requires": { + "minipass": "^2.6.0" + } + }, + "fs.realpath": { + "version": "1.0.0", + "bundled": true + }, + "gauge": { + "version": "2.7.4", + "bundled": true, + "requires": { + "aproba": "^1.0.3", + "console-control-strings": "^1.0.0", + "has-unicode": "^2.0.0", + "object-assign": "^4.1.0", + "signal-exit": "^3.0.0", + "string-width": "^1.0.1", + "strip-ansi": "^3.0.1", + "wide-align": "^1.1.0" + } + }, + "glob": { + "version": "7.1.4", + "bundled": true, + "requires": { + "fs.realpath": "^1.0.0", + "inflight": "^1.0.4", + "inherits": "2", + "minimatch": "^3.0.4", + "once": "^1.3.0", + "path-is-absolute": "^1.0.0" + } + }, + "has-unicode": { + "version": "2.0.1", + "bundled": true + }, + "iconv-lite": { + "version": "0.4.24", + "bundled": true, + "requires": { + "safer-buffer": ">= 2.1.2 < 3" + } + }, + "ignore-walk": { + "version": "3.0.3", + "bundled": true, + "requires": { + "minimatch": "^3.0.4" + } + }, + "inflight": { + "version": "1.0.6", + "bundled": true, + "requires": { + "once": "^1.3.0", + "wrappy": "1" + } + }, + "inherits": { + "version": "2.0.4", + "bundled": true + }, + "ini": { + "version": "1.3.5", + "bundled": true + }, + "is-fullwidth-code-point": { + "version": "1.0.0", + "bundled": true, + "requires": { + "number-is-nan": "^1.0.0" + } + }, + "isarray": { + "version": "1.0.0", + "bundled": true + }, + "minimatch": { + "version": "3.0.4", + "bundled": true, + "requires": { + "brace-expansion": "^1.1.7" + } + }, + "minimist": { + "version": "1.2.0", + "bundled": true + }, + "minipass": { + "version": "2.9.0", + "bundled": true, + "requires": { + "safe-buffer": "^5.1.2", + "yallist": "^3.0.0" + } + }, + "minizlib": { + "version": "1.3.3", + "bundled": true, + "requires": { + "minipass": "^2.9.0" + } + }, + "mkdirp": { + "version": "0.5.1", + "bundled": true, + "requires": { + "minimist": "0.0.8" + }, + "dependencies": { + "minimist": { + "version": "0.0.8", + "bundled": true + } + } + }, + "ms": { + "version": "2.1.2", + "bundled": true + }, + "needle": { + "version": "2.4.0", + "bundled": true, + "requires": { + "debug": "^3.2.6", + "iconv-lite": "^0.4.4", + "sax": "^1.2.4" + } + }, + "node-pre-gyp": { + "version": "0.14.0", + "bundled": true, + "requires": { + "detect-libc": "^1.0.2", + "mkdirp": "^0.5.1", + "needle": "^2.2.1", + "nopt": "^4.0.1", + "npm-packlist": "^1.1.6", + "npmlog": "^4.0.2", + "rc": "^1.2.7", + "rimraf": "^2.6.1", + "semver": "^5.3.0", + "tar": "^4.4.2" + } + }, + "nopt": { + "version": "4.0.1", + "bundled": true, + "requires": { + "abbrev": "1", + "osenv": "^0.1.4" + } + }, + "npm-bundled": { + "version": "1.0.6", + "bundled": true + }, + "npm-packlist": { + "version": "1.4.6", + "bundled": true, + "requires": { + "ignore-walk": "^3.0.1", + "npm-bundled": "^1.0.1" + } + }, + "npmlog": { + "version": "4.1.2", + "bundled": true, + "requires": { + "are-we-there-yet": "~1.1.2", + "console-control-strings": "~1.1.0", + "gauge": "~2.7.3", + "set-blocking": "~2.0.0" + } + }, + "number-is-nan": { + "version": "1.0.1", + "bundled": true + }, + "object-assign": { + "version": "4.1.1", + "bundled": true + }, + "once": { + "version": "1.4.0", + "bundled": true, + "requires": { + "wrappy": "1" + } + }, + "os-homedir": { + "version": "1.0.2", + "bundled": true + }, + "os-tmpdir": { + "version": "1.0.2", + "bundled": true + }, + "osenv": { + "version": "0.1.5", + "bundled": true, + "requires": { + "os-homedir": "^1.0.0", + "os-tmpdir": "^1.0.0" + } + }, + "path-is-absolute": { + "version": "1.0.1", + "bundled": true + }, + "process-nextick-args": { + "version": "2.0.1", + "bundled": true + }, + "protobufjs": { + "version": "5.0.3", + "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-5.0.3.tgz", + "integrity": "sha512-55Kcx1MhPZX0zTbVosMQEO5R6/rikNXd9b6RQK4KSPcrSIIwoXTtebIczUrXlwaSrbz4x8XUVThGPob1n8I4QA==", + "requires": { + "ascli": "~1", + "bytebuffer": "~5", + "glob": "^7.0.5", + "yargs": "^3.10.0" + } + }, + "rc": { + "version": "1.2.8", + "bundled": true, + "requires": { + "deep-extend": "^0.6.0", + "ini": "~1.3.0", + "minimist": "^1.2.0", + "strip-json-comments": "~2.0.1" + } + }, + "readable-stream": { + "version": "2.3.6", + "bundled": true, + "requires": { + "core-util-is": "~1.0.0", + "inherits": "~2.0.3", + "isarray": "~1.0.0", + "process-nextick-args": "~2.0.0", + "safe-buffer": "~5.1.1", + "string_decoder": "~1.1.1", + "util-deprecate": "~1.0.1" + } + }, + "rimraf": { + "version": "2.7.1", + "bundled": true, + "requires": { + "glob": "^7.1.3" + } + }, + "safe-buffer": { + "version": "5.1.2", + "bundled": true + }, + "safer-buffer": { + "version": "2.1.2", + "bundled": true + }, + "sax": { + "version": "1.2.4", + "bundled": true + }, + "semver": { + "version": "5.7.1", + "bundled": true + }, + "set-blocking": { + "version": "2.0.0", + "bundled": true + }, + "signal-exit": { + "version": "3.0.2", + "bundled": true + }, + "string-width": { + "version": "1.0.2", + "bundled": true, + "requires": { + "code-point-at": "^1.0.0", + "is-fullwidth-code-point": "^1.0.0", + "strip-ansi": "^3.0.0" + } + }, + "string_decoder": { + "version": "1.1.1", + "bundled": true, + "requires": { + "safe-buffer": "~5.1.0" + } + }, + "strip-ansi": { + "version": "3.0.1", + "bundled": true, + "requires": { + "ansi-regex": "^2.0.0" + } + }, + "strip-json-comments": { + "version": "2.0.1", + "bundled": true + }, + "tar": { + "version": "4.4.13", + "bundled": true, + "requires": { + "chownr": "^1.1.1", + "fs-minipass": "^1.2.5", + "minipass": "^2.8.6", + "minizlib": "^1.2.1", + "mkdirp": "^0.5.0", + "safe-buffer": "^5.1.2", + "yallist": "^3.0.3" + } + }, + "util-deprecate": { + "version": "1.0.2", + "bundled": true + }, + "wide-align": { + "version": "1.1.3", + "bundled": true, + "requires": { + "string-width": "^1.0.2 || 2" + } + }, + "wrappy": { + "version": "1.0.2", + "bundled": true + }, + "yallist": { + "version": "3.1.1", + "bundled": true + } } } } }, + "@mojaloop/central-services-stream": { + "version": "11.0.0", + "resolved": "https://registry.npmjs.org/@mojaloop/central-services-stream/-/central-services-stream-11.0.0.tgz", + "integrity": "sha512-MoG/kaMEgEiM8tjg67tLoizeEKiDXNMLoK+s+ioY1GFSuFFJPJvAgWH78P4rkLicRvhtoD0Uyasq3HSVjXPLwQ==", + "requires": { + "async": "3.2.3", + "events": "3.3.0", + "node-rdkafka": "2.12.0" + }, + "dependencies": { + "async": { + "version": "3.2.3", + "resolved": "https://registry.npmjs.org/async/-/async-3.2.3.tgz", + "integrity": "sha512-spZRyzKL5l5BZQrr/6m/SqFdBN0q3OCI0f9rjfBzCMBIP4p75P620rR3gTmaksNOhmzgdxcaxdNfMy6anrbM0g==" + } + } + }, "@mojaloop/event-sdk": { "version": "8.1.0", "resolved": "https://registry.npmjs.org/@mojaloop/event-sdk/-/event-sdk-8.1.0.tgz", @@ -844,9 +1295,9 @@ } }, "@mojaloop/sdk-standard-components": { - "version": "8.1.0", - "resolved": "https://registry.npmjs.org/@mojaloop/sdk-standard-components/-/sdk-standard-components-8.1.0.tgz", - "integrity": "sha512-RzCx4Au0jptn1k/f7trwzZpD+rewYn6b7sz6OCArC/8gV+yFHLmFo0iszrUgYiDtApk3SUMxuy4zJ1QFISDd3A==", + "version": "8.6.1", + "resolved": "https://registry.npmjs.org/@mojaloop/sdk-standard-components/-/sdk-standard-components-8.6.1.tgz", + "integrity": "sha512-KN8OO+uwoIfUZG9XamUNtY+doXlaNSae9ZZDpNhYjsVkaR1uE6TKPXiisH1gHMGkr9nNMCw8ON6EQr8s4jSO+A==", "requires": { "base64url": "^3.0.1", "ilp-packet": "2.2.0", @@ -3213,9 +3664,9 @@ "dev": true }, "events": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/events/-/events-3.0.0.tgz", - "integrity": "sha512-Dc381HFWJzEOhQ+d8pkNon++bk9h6cdAoAj4iE6Q4y6xgTzySWXlKn05/TVNpjnfRqi/X0EpJEJohPjNI3zpVA==" + "version": "3.3.0", + "resolved": "https://registry.npmjs.org/events/-/events-3.3.0.tgz", + "integrity": "sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==" }, "events-to-array": { "version": "1.1.2", @@ -6946,9 +7397,9 @@ } }, "node-rdkafka": { - "version": "2.7.1", - "resolved": "https://registry.npmjs.org/node-rdkafka/-/node-rdkafka-2.7.1.tgz", - "integrity": "sha512-LrPTNtAoENJedyvYDI/AhBieq+aaFD+ImEIFAxJzL1HAYDZdCwe+TjivSK6N4YLXtxlbXVA1i43DK04VOWebeA==", + "version": "2.12.0", + "resolved": "https://registry.npmjs.org/node-rdkafka/-/node-rdkafka-2.12.0.tgz", + "integrity": "sha512-Wda7AQP+Bo8AhJDSAWTxSD8CsaJnirM+2whlKKP0mOO/I3iz9yoq/JQ2k1DGQ3BSEwXmg8adK064+ThjvCuOpw==", "requires": { "bindings": "^1.3.1", "nan": "^2.14.0" @@ -8989,7 +9440,6 @@ "version": "7.5.0", "resolved": "https://registry.npmjs.org/sinon/-/sinon-7.5.0.tgz", "integrity": "sha512-AoD0oJWerp0/rY9czP/D6hDTTUYGpObhZjMpd7Cl/A6+j0xBE+ayL/ldfggkBXUs0IkvIiM1ljM8+WkOc5k78Q==", - "dev": true, "requires": { "@sinonjs/commons": "^1.4.0", "@sinonjs/formatio": "^3.2.1", diff --git a/package.json b/package.json index cbcb3be9f..c4473fa93 100644 --- a/package.json +++ b/package.json @@ -78,12 +78,12 @@ "@mojaloop/central-object-store": "8.2.0", "@mojaloop/central-services-auth": "5.2.1", "@mojaloop/central-services-database": "8.2.1", - "@mojaloop/central-services-error-handling": "8.2.1", + "@mojaloop/central-services-error-handling": "12.0.4", "@mojaloop/central-services-health": "8.1.1", "@mojaloop/central-services-logger": "8.1.2", "@mojaloop/central-services-metrics": "5.2.0", - "@mojaloop/central-services-shared": "8.2.0", - "@mojaloop/central-services-stream": "8.1.1", + "@mojaloop/central-services-shared": "8.7.2", + "@mojaloop/central-services-stream": "11.0.0", "@mojaloop/event-sdk": "8.1.0", "@mojaloop/forensic-logging-client": "5.2.0", "@mojaloop/ml-number": "8.2.0",